$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa File: 3230322e38372e3137362e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: SfZ0jhebI2afsQBDl6pO+bpG1z5mBTqD6mWtupdGEdA= Subject key identifier: 73:CA:56:AD:A0:C6:CA:29:96:30:9C:C7:70:37:42:AD:D1:95:07:86 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 67377124CD78AFB3ACDFB3BEEC3D6ED8E9AE7BAD Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa Signing time: Sat 06 Apr 2024 04:02:03 +0000 ROA not before: Sat 06 Apr 2024 03:57:03 +0000 ROA not after: Sat 05 Apr 2025 04:02:03 +0000 asID: 38496 IP address blocks: 202.87.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:37:71:24:cd:78:af:b3:ac:df:b3:be:ec:3d:6e:d8:e9:ae:7b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Apr 6 03:57:03 2024 GMT Not After : Apr 5 04:02:03 2025 GMT Subject: CN=73CA56ADA0C6CA2996309CC7703742ADD1950786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:c5:65:45:38:50:78:08:cc:fc:17:ab:b6: 77:7e:0a:df:2c:81:d5:92:c8:ba:81:49:77:4d:12: c7:c1:35:18:f2:3f:64:73:86:e9:14:20:a1:40:f6: a1:cc:1c:aa:83:1f:45:1d:94:7a:53:54:d3:1a:25: a8:b3:5d:81:38:1e:e7:1e:77:13:5a:9c:31:0e:0d: 0f:e0:12:17:2c:93:c2:6f:9b:a3:be:9e:23:cd:fe: 5a:cc:7b:6a:fc:45:6d:5a:0a:40:57:d1:2e:75:90: b4:0d:0f:d4:11:59:56:39:0e:47:d3:3b:40:62:8a: 41:e7:c5:21:fb:79:2f:c9:66:42:29:f4:82:d2:28: 88:72:b6:92:cc:ca:26:44:4c:7e:71:b8:23:43:a0: 2c:7e:63:1e:b1:27:d5:fc:34:02:c1:1b:df:b7:03: cc:ef:7d:24:8c:5f:fd:e2:47:b4:d7:31:30:74:ab: 56:93:a8:be:2c:68:6d:9d:cc:bd:45:95:d4:7a:a3: a3:61:e8:bc:85:8f:2a:0d:47:f5:d3:94:3b:d7:f5: 6e:86:f6:ef:13:51:b9:27:78:26:62:13:a9:6e:df: 81:0e:c6:54:d1:75:7c:d7:e5:0b:dc:64:70:4e:09: fb:1e:40:29:f9:71:9d:38:81:d1:61:c0:b2:d4:c1: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CA:56:AD:A0:C6:CA:29:96:30:9C:C7:70:37:42:AD:D1:95:07:86 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.176.0/24 Signature Algorithm: sha256WithRSAEncryption 42:28:98:e1:60:25:84:33:36:ee:3e:3d:7f:ce:33:c6:b8:be: 36:d2:c8:63:a7:15:16:a4:bc:0a:a5:65:d7:b4:29:9d:0f:41: 60:67:ad:ca:ce:4a:a1:6a:95:e1:15:3d:13:26:f6:e1:5e:72: 68:10:7f:1c:dc:bb:61:4c:b1:ed:b9:58:ae:f8:d6:47:45:74: a4:20:05:36:ba:46:26:2e:09:c3:32:10:7e:7e:df:f2:b7:17: 10:0e:f5:14:7a:8a:c4:8f:85:01:2c:fb:64:58:c7:44:6b:89: 75:68:ec:94:f7:a5:e3:20:50:de:c0:0f:2d:95:ee:b0:0c:16: a6:20:49:01:cd:fd:64:ae:f8:b2:6e:79:2d:23:91:c1:b7:f7: 01:6d:27:87:a7:91:2f:89:8f:3a:eb:42:72:39:8c:6e:b5:a2: 31:62:15:4c:4b:84:ce:c0:9f:2c:14:19:11:3a:29:f3:68:18: be:a7:48:12:de:26:1e:c0:71:83:1a:64:c6:5f:4a:f6:f6:e6: 94:1a:8c:3e:b0:88:f8:71:50:8f:ca:1e:77:f2:4b:90:cf:ff: 34:54:da:c5:89:b1:0a:30:11:dd:f0:30:0a:59:d8:f1:39:69: 63:0d:d9:ea:c3:35:72:1a:6e:2e:28:1e:14:ec:a9:76:20:6b: 39:93:f0:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZzdxJM14r7Os37O+7D1u2Omue60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNDA0MDYwMzU3MDNaFw0yNTA0MDUwNDAyMDNaMDMxMTAvBgNV BAMTKDczQ0E1NkFEQTBDNkNBMjk5NjMwOUNDNzcwMzc0MkFERDE5NTA3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79sVlRThQeAjM/Bertnd+Ct8s gdWSyLqBSXdNEsfBNRjyP2RzhukUIKFA9qHMHKqDH0UdlHpTVNMaJaizXYE4Huce dxNanDEODQ/gEhcsk8Jvm6O+niPN/lrMe2r8RW1aCkBX0S51kLQND9QRWVY5DkfT O0BiikHnxSH7eS/JZkIp9ILSKIhytpLMyiZETH5xuCNDoCx+Yx6xJ9X8NALBG9+3 A8zvfSSMX/3iR7TXMTB0q1aTqL4saG2dzL1FldR6o6Nh6LyFjyoNR/XTlDvX9W6G 9u8TUbkneCZiE6lu34EOxlTRdXzX5QvcZHBOCfseQCn5cZ04gdFhwLLUwWJzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUc8pWraDGyimWMJzHcDdCrdGVB4YwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMjJlMzgzNzJlMzEzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpXsDANBgkqhkiG 9w0BAQsFAAOCAQEAQiiY4WAlhDM27j49f84zxri+NtLIY6cVFqS8CqVl17QpnQ9B YGetys5KoWqV4RU9Eyb24V5yaBB/HNy7YUyx7blYrvjWR0V0pCAFNrpGJi4JwzIQ fn7f8rcXEA71FHqKxI+FASz7ZFjHRGuJdWjslPel4yBQ3sAPLZXusAwWpiBJAc39 ZK74sm55LSORwbf3AW0nh6eRL4mPOutCcjmMbrWiMWIVTEuEzsCfLBQZETop82gY vqdIEt4mHsBxgxpkxl9K9vbmlBqMPrCI+HFQj8oed/JLkM//NFTaxYmxCjAR3fAw ClnY8TlpYw3Z6sM1chpuLigeFOypdiBrOZPwNw== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org